Lucene search
+L

58451 matches found

Cvelist
Cvelist
•added 2026/02/08 11:32 p.m.•61 views

CVE-2026-2194 D-Link DI-7100G C1 start_proxy_client_email command injection

A flaw has been found in D-Link DI-7100G C1 24.04.18D1. This affects the function startproxyclientemail. Executing a manipulation can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS0.04398EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/02/08 11:32 p.m.•9 views

CVE-2026-2194

A flaw has been found in D-Link DI-7100G C1 24.04.18D1. This affects the function startproxyclientemail. Executing a manipulation can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS6.4AI score0.04398EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/08 11:32 p.m.•13 views

CVE-2026-2194 D-Link DI-7100G C1 start_proxy_client_email command injection

A flaw has been found in D-Link DI-7100G C1 24.04.18D1. This affects the function startproxyclientemail. Executing a manipulation can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS6.4AI score0.04398EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/02/08 7:22 p.m.•37 views

CVE-2026-2087

A flaw has been found in SourceCodester Online Class Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. This manipulation of the argument useremail causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

9.8CVSS7.1AI score0.00371EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/08 5:15 p.m.•27 views

CVE-2026-2165

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

9.8CVSS0.00633EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/02/08 4:32 p.m.•58 views

CVE-2026-2165 detronetdip E-commerce Account Creation Endpoint add_seller.php missing authentication

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

7.5CVSS0.00633EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2026/02/08 4:32 p.m.•18 views

CVE-2026-2165

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

7.5CVSS6.9AI score0.00633EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/08 4:32 p.m.•12 views

CVE-2026-2165 detronetdip E-commerce Account Creation Endpoint add_seller.php missing authentication

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

7.5CVSS6.9AI score0.00633EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/02/08 4:32 p.m.•31 views

EUVD-2026-5784

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

7.5CVSS6.9AI score0.00633EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2026/02/08 4:32 p.m.•17 views

CVE-2026-2165 detronetdip E-commerce Account Creation Endpoint add_seller.php missing authentication

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

6.9CVSS6.9AI score0.00633EPSS
SaveExploits1References8
CVE
CVE
•added 2026/02/08 4:32 p.m.•45 views

CVE-2026-2165

CVE-2026-2165 affects detronetdip E-commerce 1.0.0. The vulnerability lies in an unknown function of /Admin/assets/backend/seller/add_seller.php where manipulating the email argument can cause missing authentication, enabling a remote exploit. Public exploit exists; the issue was reported early v...

9.8CVSS6.9AI score0.00633EPSS
SaveExploits1References6Affected Software1
osv_cve
osv_cve
•added 2026/02/08 4:15 p.m.•22 views

CVE-2026-2161

A vulnerability was found in itsourcecode Directory Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/forget-password.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made...

9.8CVSS7.1AI score0.00427EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/02/08 4:02 p.m.•14 views

CVE-2026-2161 itsourcecode Directory Management System forget-password.php sql injection

A vulnerability was found in itsourcecode Directory Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/forget-password.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made...

7.5CVSS7.1AI score0.00427EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/02/08 4:02 p.m.•32 views

EUVD-2026-5788

A vulnerability was found in itsourcecode Directory Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/forget-password.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made...

9.8CVSS7.1AI score0.00427EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/02/08 12:00 a.m.•33 views

PT-2026-6996

Name of the Vulnerable Software and Affected Versions detronetdip E-commerce version 1.0.0 Description A weakness exists in detronetdip E-commerce 1.0.0 related to account creation. A manipulation of the email argument within an unknown function of the file /Admin/assets/backend/seller/add...

9.8CVSS7AI score0.00633EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/08 12:00 a.m.•11 views

CVE-2026-2161: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Directory Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/forget-password.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made...

9.8CVSS7.1AI score0.00427EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/08 12:00 a.m.•41 views

PT-2026-7027

Name of the Vulnerable Software and Affected Versions D-Link DI-7100G C1 version 24.04.18D1 Description A flaw exists in the start proxy client email function that can allow for command injection. This issue can be exploited remotely. Recommendations At the moment, there is no information about a...

6.5CVSS6.7AI score0.04398EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/08 12:00 a.m.•6 views

CVE-2026-2165: Missing Authentication for Critical Function

A weakness has been identified in detronetdip E-commerce 1.0.0. Impacted is an unknown function of the file /Admin/assets/backend/seller/addseller.php of the component Account Creation Endpoint. Executing a manipulation of the argument email can lead to missing authentication. The attack can be...

9.8CVSS6.9AI score0.00633EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/08 12:00 a.m.•24 views

E-commerce access control vulnerability

E-commerce is a dynamic e-commerce website developed by Bhabishya Ghimire as an individual developer. Version 1.0.0 of E-commerce contains a security vulnerability related to access control. This vulnerability arises from incorrect handling of the parameter email in the file...

9.8CVSS7.2AI score0.00633EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/02/08 12:00 a.m.•33 views

PT-2026-6992

Name of the Vulnerable Software and Affected Versions itsourcecode Directory Management System version 1.0 Description A flaw exists in itsourcecode Directory Management System that allows for remote code execution. The issue is located within the /admin/forget-password.php file. Specifically,...

9.8CVSS7.4AI score0.00427EPSS
SaveExploits1References10
Rows per page
Query Builder